Features
Every feature listed here ships in the product today. No roadmap items, no “coming soon”.
Supported Payment Methods
| Gateway | Chip / PIN | NFC / Tap | QR Code | Manual |
|---|---|---|---|---|
| Visa / Mastercard | ||||
| WeChat Pay | ||||
| Alipay | ||||
| UnionPay | ||||
| CentraPay | ||||
| EFTPOS | ||||
| Cash |
Multi-Gateway Payments
Accept payments from all major providers in a single terminal.
- Card (Visa / Mastercard) — chip, PIN, contactless (tap-to-pay)
- WeChat Pay — QR code scanning
- Alipay — QR code scanning
- UnionPay — QR code scanning
- CentraPay — wallet payments
- EFTPOS — debit card processing
- Cash — recording for reconciliation
Tap-to-Pay NFC
One-tap card detection via Sunmi PaySDK or Android NFC adapter.
- Instant handoff to the Skyzer payment SDK for EMV processing
- Tip & fee summary dialog shown before charging
- Configurable idle re-enable watchdog for reliable detection
- Automatic pause during standby mode to save battery
- Apple Pay, Google Pay, and physical contactless cards
Smart Payment Routing
Automatic fallback to the next available provider on retriable failures.
- Each provider declares its capabilities
- The router selects the best match for every transaction
- Retry with next provider on timeout or soft-decline
- Configurable gateway ordering per terminal
Tipping & Fees
Flexible tipping presets and per-gateway surcharge control.
- Preset percentages — configurable chips (e.g. 10%, 15%, 20%)
- Custom amount — operator enters an arbitrary tip value
- No Tip — one-tap skip
- Global surcharge percentage across all gateways
- Per-gateway fee overrides (e.g. Visa 1.5%, Alipay 0%)
- Server can lock fee settings to prevent local modification
Reports & Settlement
Real-time transaction reporting with end-of-day batch settlement.
- Filterable transaction log with search
- Per-gateway channel summary
- Overall revenue summary
- Settlement reports (end-of-day batching)
- Detailed view: amounts, fees, tips, auth codes, masked card numbers, timestamps
Receipts & Printing
Sunmi built-in, network, and Bluetooth thermal printers.
- Structured merchant receipts (header, amounts, totals, auth codes)
- QR codes and barcodes on receipts
- Auto-print after successful payment (optional)
- Configurable paper width (58 mm / 80 mm)
- ESC/POS protocol over Wi-Fi TCP or Bluetooth
Multi-Terminal Networking
LAN discovery, WebSocket push, and POS Controller mode.
- Automatic terminal discovery via UDP broadcast + NSD
- Inter-terminal payment and refund commands over LAN
- HMAC-signed requests with timestamp validation (anti-replay)
- STOMP over secure WebSocket for real-time server push
- POS Controller mode: terminal as peripheral, amount locked by master POS
Server-Driven Configuration
Two-layer config model — root defaults + per-terminal overrides.
- Root config from the public /endPoints API (system-wide defaults)
- Terminal override from the authenticated /terminal/info API (sparse, per-device)
- Deep-merge: terminal values override root, unset fields inherit root
- Server pushes FORCE_REFRESH via WebSocket for instant config updates
- Configurable: gateways, tips, fees, standby, timezone, feature flags, timeouts
Over-the-Air Updates
Self-updating without an app store. SHA-256 verified. Presigned S3 URLs.
- Fetches manifest from GET /api/v1/app/manifest?flavor=payus
- Compares versionCode against installed build
- Streams APK to disk with progress bar — never loads into memory
- SHA-256 hash verification before installing
- Presigned S3 URLs expire after 1 hour
- Mandatory flag forces update before terminal can be used
Enterprise Security
Root detection, encrypted storage, JWT + HMAC auth, environment segregation.
- Root and jailbreak detection on every cold start
- AES-256-GCM encrypted storage (Android EncryptedSharedPreferences)
- JWT Bearer tokens for all API calls
- OAuth 2.0 Client Credentials flow for token refresh
- HMAC signing for LAN inter-terminal commands
- Switching environments clears all auth data — prevents credential leaks
Security at every layer
AES-256-GCMEncrypted Storage
JWT + OAuth 2.0Token Auth
HMAC-SHA256Request Signing
Root DetectionDevice Integrity